{{- if .Values.vault }}
{{- if .Values.vault.imagePullSecret }}
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: imagepull
spec:
  type: kv-v2
  mount: {{ .Values.vault.mount }}
  path: {{ .Values.vault.imagePullSecret.path }}
  destination:
    name: {{ .Values.vault.imagePullSecret.name }}
    create: true
    type: kubernetes.io/dockerconfigjson
  refreshAfter: 30s
  vaultAuthRef: vault-auth
{{- end }}
{{- end }}